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© Media Playe a} edb00555.jtx 1,024 ae File 8/16/2024 6:06:21 AM 
MF | "| edb00556.jtx 1,024 Regular File 8/16/2024 6:52:43 AM 
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eis [| edbres00001jrs.FileSlack 1,024 File Slack 
1-4) Provisioning - 
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17344|DESKTOP-mmmm —_[C:\Users\DFM\Desktop\Name = DFM\AnyDesk.ink }2024-06-19T11:05:21.169575) ci senate tei 2024-08-15T05:48:21.472106 1957|DESKTOP-sammmmiyemm |AnyDesk 12024-08-15T05:48:22.9800717.Ink 
17348|DESKTOP-Saaaae |C:\Users\DFM\Downloads\Programs\VirtualBox-7.0.20-163906-W| 2024-08-15T05:56:29.509238|2024-08-15T05:55:09.280998| 2024-08-15T05:56:29.509238| _110252592|DESKTOP-CitaiiiehiiymiRint |2024-08-15705:56:35.1244144 exe 
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17352| |c:\ProgramData\Microsoft\Windows\start Menu\Programs\Oracll2024-08-15T05:56:54.932771|2024-08-15105:56:54.932771|2024-08-15105:56:58.224966| 878] |2024-08-15T05:57:00.0550694 Ink 
17353] |C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracll 2024-08-15T05:56:54.934766|2024-08-15T05:56:54.933769| 2024-08-15T05:56:58.464325| 1156| |2024-08-15T05:57:00.0500824 Ink 
17354|DESKTOP aiidieameni |C:\Users\Public\Public Desktop\Oracle VM VirtualBox.Ink 2024-08-15T05:56:54.936761| 2024-08-15T05:56:54.936761|2024-08-15T05:56:58.42144Q, 1149|NT AUTHORITY\SYSTEM __|Oracle VM Virtu{2024-08-15T0S:57:00.0460934 Ink 
17359] [C:\Users\DFM\.VirtualBox\VBoxSVC.log [2024-08-19708:28:20.778300|2024-08-15105:57-01.647809|2024-08-19T08:28:20.778300, 30796| [2024-08-19T08:28:20.9219164 log 
17364] [C:\Users\DFM\,VirtualBox\VirtualBox.xml [2024-08-19T04:12:09.787656|2024-08-15T05:57-01.673739| 2024-08-19T04:12:09.787656, 2725 12024-08-19T04:12:09.9731604 xml 
17365] |C:\Users\DFM\ VirtualBox\selectorwindow.log-1 2024-08-19T08:28:17.546425| [2024-08-15105:57-01.663766| [2024-08-19708:28:17.546425| 208} |2024-08-19T08:28:17.8690765 oO. 
17376 [C:\Users\DFM\ VirtualBox\VirtualBox.xml-prev [2024-08-19T04:12:09.781672|2024-08-15T05:57:01.673739| 2024-08-19T04:12:09 781672] 2725) 12024-08-19T04:12:09.9671764 xml-prev 
17380) |C:\Users\DFM\ VirtualBox\selectorwindow.log.2 |2024-08-19T07:23:17.234881|2024-08-15705:57:01. 663766, |2024-08-19T07:23:17.234881) 2425 |2024-08-19T08:28:17.8561105 02 
17382|DESKTOP-COOae |C:\Users\DFM\Documents\ViberDownloads\clipboard_image_15c|2024-08-16106:24:22.468473|2024-08-16106:24:22. 462489) |2024-08-16706:05:38.365162| 78257 | DESKTOP-SOORy |2024-08-16706:05:38.5994824 jpg 
17390] [C:\Users\DFM\ VirtualBox\selectorwindowlog3 [2024-08-19T06:22:12.374976|2024-08-15T05:57:01.663766|2024-08-19T06:22:12.374974 366 |2024-08-19708:28:17.8491294 03 
17391| [C:\Users\DFM\.VirtualBox\selectorwindow.log.4 [2024-08-19T05:36:45.593683| 2024-08-15705:57-01,.663766|2024-08-19705:36:45.593683) 1157| [2024-08-19T08:28:17.8371614 04 
17400 C.\Users\DFM\ VirtualBox\selectorwindow.log.5 2024-08-16T10:55:52.729414 2024-08-15T05:57:01.663766 2024-08-16T10:55:52.729414 1697 2024-08-19T08:28:17.8261908 os 
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1733] wine rz bitos://wnr \et/utils/ese_database_view htmi#google_vi a 19708:37:06.7290150Z /2024-08-19708:37:06.7367476]ESEDatabaseView - 
1734) 1-4 htt fi 12024-08-19T08:37:06 73200202 12024-08-19708:37:06.7701065] YouTube 
1736] 1-{htte: smyanmar.com/ |2024-08-19708:37:06.7320160Z |2024-08-19T08:37:06.7701065j Digital For 
4496 | http: '2024-08-13702:57:12 89908802 '2024-08-13702:57-12 9159412] Rufus - Cre 12024-08-13702:57:02 88754802 
6811) 1-{htte: rch?g=forensics+myanmar&gs_lcrp=Eg42024-08-12T04:15:44 19008002 [2024-08-12704:15:44 2575389] forensics myanmat at cH{2024-08-12T06. 15:34.1453810Z 
6812| fh vck/a?'&8p=88078a432057b8dS/mitdHMN 2024-08-12704:15:44 17724302 12024-08-12704:15:44 18854047 |2024-08-12704:15:34 11991402 
6813] lwrinrt//{S-1-5-21- {https:/ {[/uovew bing com/images/search view=detailV2&ccid=F1Sqk] 2024-08-12705:15:45 38660702 |2024-08-12704:15:45. 4448093] forensics myanmar - Search 2024-08-1270-15:35.3064170Z 
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